General

  • Target

    a74ceb08bda05cb3f455ebdab767fdfa_JaffaCakes118

  • Size

    1.4MB

  • Sample

    241127-l47neswjfk

  • MD5

    a74ceb08bda05cb3f455ebdab767fdfa

  • SHA1

    06cb7b1c33b89d393d9f64c371d95ce4ae9a6c25

  • SHA256

    fa38cb95887ab6262de8a97c7941e1a69019c500fbddb702e0573af2b0b4f8c8

  • SHA512

    7189cac5d1009bc3a4805be78ee6398b096273949060ae767b3513b929fb99b68439cdc9090f55605c2fcd7dbf05eb889e7c6f3447cf5840c7fb54eab2740e78

  • SSDEEP

    24576:dmzzHpBxBB5vBD1vCfwEEUAoMeSerIc5cs5RrbHp7z1muVbQ+1dzhUtAhwi2AbQ5:uzJBN5ZD9Cf7hRUc5cs5JHp7wubBODqs

Malware Config

Targets

    • Target

      a74ceb08bda05cb3f455ebdab767fdfa_JaffaCakes118

    • Size

      1.4MB

    • MD5

      a74ceb08bda05cb3f455ebdab767fdfa

    • SHA1

      06cb7b1c33b89d393d9f64c371d95ce4ae9a6c25

    • SHA256

      fa38cb95887ab6262de8a97c7941e1a69019c500fbddb702e0573af2b0b4f8c8

    • SHA512

      7189cac5d1009bc3a4805be78ee6398b096273949060ae767b3513b929fb99b68439cdc9090f55605c2fcd7dbf05eb889e7c6f3447cf5840c7fb54eab2740e78

    • SSDEEP

      24576:dmzzHpBxBB5vBD1vCfwEEUAoMeSerIc5cs5RrbHp7z1muVbQ+1dzhUtAhwi2AbQ5:uzJBN5ZD9Cf7hRUc5cs5JHp7wubBODqs

    • Darkcomet

      DarkComet is a remote access trojan (RAT) developed by Jean-Pierre Lesueur.

    • Darkcomet family

    • Suspicious use of SetThreadContext

MITRE ATT&CK Enterprise v15

Tasks